import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import java.io.IOException;


@WebServlet("/logout")
public class LogoutServlet extends HttpServlet {

    @Override
    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        HttpSession session= req.getSession(false);
        if(session==null){
            resp.setStatus(403);
            return;
        }
        //没有一个直接的方法可以移除session
        //直接把session中的user对象移除
        session.removeAttribute("user");
        //重定向到登录页
        resp.sendRedirect("login.html");
    }
}
